Question: 8You have a Recovery Service vault that you use to test backups. The test backups contain two protected virtual machines.You need to delete the Recovery Services vault. What should you do first?

A. From the Recovery Service vault, stop the backup of each backup item.B. From the Recovery Service vault, delete the backup data.C. Modify the disaster recovery properties of each virtual machine.D. Modify the locks of each virtual machine.

Answer: AExplanation:You can’t delete a Recovery Services vault if it is registered to a server and holds backup data. If you try to delete a vault, but can’t, the vault is still configured to receive backup data.Remove vault dependencies and delete vaultIn the vault dashboard menu, scroll down to the Protected Items section, and click Backup Items. In this menu, you can stop and delete Azure File Servers, SQL Servers in Azure VM, and Azure virtual machines.

Question: 9DRAG DROPYou have an Azure subscription named Subscription1.You create an Azure Storage account named contosostorage, and then you create a file share named data.Which UNC path should you include in a script that references files from the data file share? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.NOTE: Each correct selection is worth one point.Answer:Explanation:Box 1: contosostorage The name of accountBox 2: file.core.windows.netBox 3: dataThe name of the file share is data. Example:

Question: 10HOTSPOTYou have an Azure Storage accounts as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.NOTE: Each correct selection is worth one point.Answer:

Explanation:Box 1: storageaccount1 and storageaccount2 onlyBox 2: All the storage accountsNote: The three different storage account options are: General-purpose v2 (GPv2) accounts, General- purpose v1 (GPv1) accounts, and Blob storage accounts.General-purpose v2 (GPv2) accounts are storage accounts that support all of the latest features for blobs, files, queues, and tables.Blob storage accounts support all the same block blob features as GPv2, but are limited to supporting only block blobs.General-purpose v1 (GPv1) accounts provide access to all Azure Storage services, but may not have the latest features or the lowest per gigabyte pricing.References: https://docs.microsoft.com/en-us/azure/storage/common/storage-account-options

Question: 11You have an Azure subscription that contains 100 virtual machines. You regularly create and delete virtual machines.You need to identify unused disks that can be deleted. What should you do?

A. From Microsoft Azure Storage Explorer, view the Account Management properties.B. From the Azure portal, configure the Advisor recommendations.C. From Cloudyn, open the Optimizer tab and create a report.D. From Cloudyn, create a Cost Management report.

Answer: A

Question: 12DRAG DROPYou have an Azure subscription that contains an Azure virtual machine named VM1. VM1 runs Windows Server 2016 and is part of an availability set.VM1 has virtual machine-level backup enabled. VM1 is deleted.You need to restore VM1 from the backup. VM1 must be part of the availability set.Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer

Question: 13You have an Azure subscription named Subscription1.You deploy a Linux virtual machine named VM1 to Subscription1. You need to monitor the metrics and the logs of VM1.What should you use?

Answer: CExplanation:You can use extensions to configure diagnostics on your VMs to collect additional metric data.The basic host metrics are available, but to see more granular and VM-specific metrics, you need to install the Azure diagnostics extension on the VM. The Azure diagnostics extension allows additional monitoring and diagnostics data to be retrieved from the VM.References: https://docs.microsoft.com/en-us/azure/virtual-machines/linux/tutorial-monitoring

Question: 14HOTSPOTYou have an Azure subscription named Subscription1.You plan to deploy an Ubuntu Server virtual machine named VM1 to Subscription1.You need to perform a custom deployment of the virtual machine. A specific trusted root certification authority (CA) must be added during the deployment.What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.Answer:Explanation:Box 1: Unattend.xmlIn preparation to deploy shielded VMs, you may need to create an operating system specialization answer file. On Windows, this is commonly known as the “unattend.xml” file. The New- ShieldingDataAnswerFile Windows PowerShell function helps you do this. Starting with Windows Server version 1709, you can run certain Linux guest OSes in shielded VMs. If you are using the System Center Virtual Machine Manager Linux agent to specialize those VMs, the New- ShieldingDataAnswerFile cmdlet can create compatible answer files for it.Box 2: The Azure PortalYou can use the Azure portal to deploy a Linux virtual machine (VM) in Azure that runs Ubuntu. References: https://docs.microsoft.com/en-us/azure/virtual-machines/linux/quick-create-portal

Question: 15You have an Azure subscription named Subscription1. Subscription1 contains a virtual machine named VM1.You have a computer named Computer1 that runs Windows 10. Computer1 is connected to the Internet.You add a network interface named Interface1 to VM1 as shown in the exhibit (Click the Exhibit button.)

From Computer1, you attempt to connect to VM1 by using Remote Desktop, but the connection fails. You need to establish a Remote Desktop connection to VM1.What should you do first?

Answer: AIncorrect Answers:B: The network interface has already been added to VM. C: The Outbound rules are fine.D: The inbound rules are fine. Port 3389 is used for Remote Desktop.Note: Rules are processed in priority order, with lower numbers processed before higher numbers, because lower numbers have higher priority. Once traffic matches a rule, processing stops. As a result, any rules that exist with lower priorities (higher numbers) that have the same attributes as rules with higher priorities are not processed.References: https://docs.microsoft.com/en-us/azure/virtual-network/security-overview

Question: 16You plan to automate the deployment of a virtual machine scale set that uses the Windows Server 2016 Datacenter image.You need to ensure that when the scale set virtual machines are provisioned, they have web server components installed.Which two actions should you perform? Each correct answer presents part of the solution. NOTE Each correct selection is worth one point.

A. Modify the extensionProfile section of the Azure Resource Manager template.B. Create a new virtual machine scale set in the Azure portal.C. Create an Azure policy.D. Create an automation account.E. Upload a configuration script.

Answer: ABExplanation:Virtual Machine Scale Sets can be used with the Azure Desired State Configuration (DSC) extension handler. Virtual machine scale sets provide a way to deploy and manage large numbers of virtual machines, and can elastically scale in and out in response to load. DSC is used to configure the VMs as they come online so they are running the production software.References: https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine- scale-sets-dsc

Question: 17You have an Azure subscription that contains a virtual machine named VM1. VM1 hosts a line-of- business application that is available 24 hours a day. VM1 has one network interface and one managed disk. VM1 uses the D4s v3 size.You plan to make the following changes to VM1:Change the size to D8s v3. Add a 500-GB managed disk.Add the Puppet Agent extension. Attach an additional network interface.Which change will cause downtime for VM1?

Question: 18HOTSPOTYou have an Azure subscription named Subscription1. Subscription1 contains two Azure virtual machines named VM1 and VM2. VM1 and VM2 run Windows Server 2016.VM1 is backed up daily by Azure Backup without using the Azure Backup agent.VM1 is affected by ransomware that encrypts dat a.You need to restore the latest backup of VM1.To which location can you restore the backup? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Answer:Explanation:Box 1: VM1 onlyTo restore files or folders from the recovery point, go to the virtual machine and choose the desired recovery point.Box 2: A new Azure virtual machine onlyOn the Restore configuration blade, you have two choices: Create virtual machineRestore disks References:https://docs.microsoft.com/en-us/azure/backup/backup-azure-restore-files-from-vmhttps://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-vms